Citrix Presentation Server Client Content-Redirection Denial Of Service Vulnerability

Bugtraq ID:	24790
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2007-3625
Remote:	Yes
Local:	No
Published:	Jul 06 2007 12:00AM
Updated:	May 07 2015 05:37PM
Credit:	The vendor reported this issue.
Vulnerable:	Citrix Presentation Server Client 10.0
Not Vulnerable:	Citrix Presentation Server Clients 10.100

Citrix Presentation Server Client Content-Redirection Denial Of Service Vulnerability

Citrix Presentation Server Client is prone to a denial-of-service vulnerability because the application fails to handle specially crafted files.

An attacker can exploit this issue to crash the affected application and deny service to legitimate users.

This issue affects versions prior to Citrix Presentation Server Client 10.100.

Citrix Presentation Server Client Content-Redirection Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Citrix Presentation Server Client Content-Redirection Denial Of Service Vulnerability

Solution:
The vendor released an advisory and version 10.100 to address this issue. Please see the references for more information.

Citrix Presentation Server Client Content-Redirection Denial Of Service Vulnerability

References:

• Citrix Presentation Server Home Page (Citrix)
  
• CTX113919: Vulnerabilities in Citrix Presentation Server's Program Neighborhood (Citrix)
  
• Product Documentation - Citrix Presentation Server Client 10.100 Fixed Issues - (Citrix)